SHRED: Retain-Set-Free Unlearning via Self-Distillation with Logit Demotion
On the map: LLM safety and security → Machine unlearning
also in 1 more
Abstract (arXiv)
Machine unlearning for large language models (LLMs) aims to selectively remove memorized content such as private data, copyrighted text, or hazardous knowledge, without costly full retraining. Most existing methods require a retain set of curated examples to prevent catastrophic degradation of general model utility, creating an extra data dependency that complicates deployment. We propose SHRED (Self-distillation via High-surprisal-only Retain-set-free Entropy Demotion), a retain-set-free unlearning method built on a key insight: not all tokens within a forget set instance carry memorized information equally. High-information tokens concentrate the model's memorized knowledge, while low-information tokens reflect general language competence. SHRED operates in two stages. (1) Selection: We perform a forward pass on a forget set instance, collect per-token autoregressive probabilities, and select the bottom (lowest probability, highest Shannon information) as forget positions; the remaining positions are retained as benign anchors. (2) Training: We construct modified KL targets that demote the memorized token's logit at forget positions while preserving the original distribution at benign positions. The model is then trained via a single top KL self-distillation objective that simultaneously drives forgetting and utility preservation. We evaluate SHRED across four standard unlearning benchmarks and demonstrate that it establishes a new Pareto-optimal trade-off between forget efficacy and model utility, outperforming retain-set-dependent methods. Our analysis shows that SHRED is robust against relearning attacks and membership-inference attacks, and it maintains stable utility even after many sequential unlearning runs.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 28 of its 29 references that are in the map. First posted on arXiv 8 May 2026.
Builds on
28 of 29 references.
Closest ancestors · 15
Same direction, newest first
- 2025Hubble: a Model Suite to Advance the Study of LLM Memorization22 Oct
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2024Do Unlearning Methods Remove Information from Language Model Weights?11 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Models4 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
3 more
Other references · 13
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2019Machine Unlearningcited by 1,061
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2018Born Again Neural Networkscited by 546
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2019Be Your Own Teacher: Improve the Performance of Convolutional Neural Networks via Self Distillationcited by 497
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
- 2026Self-Distillation Enables Continual Learningcited by 247
- 2019Multilingual Neural Machine Translation with Knowledge Distillationcited by 95
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning
- 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2026Learning What to Forget: Improving LLM Unlearning via Learned Token-Level Importance
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
- 2024A Closer Look at Machine Unlearning for Large Language Models
- 2026Not Every Change Is Necessary: Recoverable Drift in Large Language Model Unlearning